Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3961 4.8 警告
Network
IBM Guardium Key Lifecycle Manager IBMのGuardium Key Lifecycle Managerにおける権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-1726 2026-04-30 12:14 2026-04-23 Show GitHub Exploit DB Packet Storm
3962 9.9 緊急
Network
マイクロソフト Azure IOT Central Azure IoT Central の特権昇格の脆弱性 CWE-200
情報漏えい
CVE-2026-21515 2026-04-30 12:14 2026-04-24 Show GitHub Exploit DB Packet Storm
3963 4.8 警告
Network
GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-23752 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
3964 4.8 警告
Network
GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-23753 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
3965 5.4 警告
Network
GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-23756 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
3966 5.4 警告
Network
GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-23757 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
3967 5.4 警告
Network
GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-23758 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
3968 6.5 警告
Network
Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-25773 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
3969 4.3 警告
Network
Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-28736 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
3970 7.8 重要
Local
DeepCool DeepCreative DeepCoolのDeepCreativeにおける安全でない継承されたパーミッションに関する脆弱性 CWE-277
安全でない継承されたパーミッション
CVE-2026-30266 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348121 - symantec client_firewall
client_security
norton_antispam
norton_internet_security
norton_personal_firewall
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Cl… NVD-CWE-Other
CVE-2004-0445 2017-07-11 10:30 2004-07-7 Show GitHub Exploit DB Packet Storm
348122 - symantec client_firewall
client_security
norton_antispam
norton_internet_security
norton_personal_firewall
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01… NVD-CWE-Other
CVE-2004-0444 2017-07-11 10:30 2004-07-7 Show GitHub Exploit DB Packet Storm
348123 - jftpgw jftpgw Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages. NVD-CWE-Other
CVE-2004-0448 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348124 - log2mail log2mail Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by… NVD-CWE-Other
CVE-2004-0450 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
348125 - sup
debian
sup
debian_linux
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string … NVD-CWE-Other
CVE-2004-0451 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348126 - vice vice Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format st… NVD-CWE-Other
CVE-2004-0453 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
348127 - rlpr rlpr Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code. NVD-CWE-Other
CVE-2004-0454 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348128 - pavuk
debian
gentoo
pavuk
debian_linux
linux
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header. NVD-CWE-Other
CVE-2004-0456 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348129 - ieee 802.11_wireless_protocol The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal … NVD-CWE-Other
CVE-2004-0459 2017-07-11 10:30 2004-07-7 Show GitHub Exploit DB Packet Storm
348130 - - - The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext o… NVD-CWE-Other
CVE-2004-0462 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm